JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 194.147.58.39

194.147.58.39 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 28%: ?

28%

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi3328672.contaboserver.net
Domain Name	contabo.com
Country	🇫🇷 France
City	Lauterbourg, Grand Est

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 194.147.58.39

Whois 194.147.58.39

IP Abuse Reports for 194.147.58.39:

This IP address has been reported a total of 20 times from 7 distinct sources. 194.147.58.39 was first reported on June 6th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 aranguren.org	2026-08-22 14:37:27 (2 days ago)	194.147.58.39 - - [23/Aug/2026:00:37:25 +1000] "GET /.codex/.env HTTP/1.1" 404 993 "-" "Mozilla/5.0 ... show more 194.147.58.39 - - [23/Aug/2026:00:37:25 +1000] "GET /.codex/.env HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_6; en-en) AppleWebKit/533.19.4 (KHTML, like Gecko) Version/5.0.3 Safari/533.19.4" 194.147.58.39 - - [23/Aug/2026:00:37:25 +1000] "GET /.codex/.credentials.json HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0" 194.147.58.39 - - [23/Aug/2026:00:37:25 +1000] "GET /.gemini/.env HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Fedora; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" 194.147.58.39 - - [23/Aug/2026:00:37:25 +1000] "GET /.gemini/.env HTTP/1.1" 404 997 "-" "Mozilla/5.0 (ZZ; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 194.147.58.39 - - [23/Aug/2026:00:37:25 +1000] "GET /.codex/auth.json HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Debian; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" 194.147.58.39 - - ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-22 11:32:34 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 194.147.58.39 (vmi3328672.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 194.147.58.39 (vmi3328672.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 07:32:29.475592 2026] [security2:error] [pid 22538:tid 22557] [client 194.147.58.39:37578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "certifiedebusinessconsultant.aafm.us"] [uri "/.gemini/.env"] [unique_id "aomIzewTw1yz4pCmm_DKsAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 aranguren.org	2026-08-15 14:35:30 (1 week ago)	194.147.58.39 - - [16/Aug/2026:00:35:05 +1000] "GET /.claude/settings.json HTTP/1.1" 404 993 "-" "Mo ... show more 194.147.58.39 - - [16/Aug/2026:00:35:05 +1000] "GET /.claude/settings.json HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" 194.147.58.39 - - [16/Aug/2026:00:35:29 +1000] "GET /.gemini/.env HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36" 194.147.58.39 - - [16/Aug/2026:00:35:29 +1000] "GET /.gemini/settings.json HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15" 194.147.58.39 - - [16/Aug/2026:00:35:29 +1000] "GET /.gemini/.env HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/14.0.2 Safari/605.1.15" 194.147.58.39 - - [16/Aug/2026:00:35:29 +1000] "GET /.gemini/settings.json HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Windows NT 10.0; rv:139.0) Gecko/20100101 Firefox/139.0" 194.147 ... show less	Bad Web Bot
🇺🇸 scoooter	2026-08-15 05:02:15 (1 week ago)	155 port scans in the last 24 hours.	Port Scan
🇺🇸 TPI-Abuse	2026-08-13 23:18:31 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 194.147.58.39 (vmi3328672.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 194.147.58.39 (vmi3328672.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 19:18:27.539814 2026] [security2:error] [pid 3077047:tid 3077068] [client 194.147.58.39:42144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "certifiedebusinessconsultant.aafm.us"] [uri "/.gemini/.env"] [unique_id "an5Qwx_L0I-8Rcg8lCtCVgAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 aranguren.org	2026-08-08 14:32:14 (2 weeks ago)	194.147.58.39 - - [09/Aug/2026:00:32:12 +1000] "GET /.config/gcloud/application_default_credentials. ... show more 194.147.58.39 - - [09/Aug/2026:00:32:12 +1000] "GET /.config/gcloud/application_default_credentials.json HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 194.147.58.39 - - [09/Aug/2026:00:32:12 +1000] "GET /.gemini/.env HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_1) AppleWebKit/604.3.5 (KHTML, like Gecko) Version/11.0.1 Safari/604.3.5" 194.147.58.39 - - [09/Aug/2026:00:32:12 +1000] "GET /.gemini/settings.json HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Windows NT 10.0; rv:139.0) Gecko/20100101 Firefox/139.0" 194.147.58.39 - - [09/Aug/2026:00:32:12 +1000] "GET /.gemini/settings.json HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 194.147.58.39 - - [09/Aug/2026:00:32:14 +1000] "GET /.codex/.credentials.json HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/111.0" 194 ... show less	Bad Web Bot
🇦🇺 aranguren.org	2026-08-01 14:29:37 (3 weeks ago)	194.147.58.39 - - [02/Aug/2026:00:29:36 +1000] "GET /.codex/.env HTTP/1.1" 404 997 "-" "Mozilla/5.0 ... show more 194.147.58.39 - - [02/Aug/2026:00:29:36 +1000] "GET /.codex/.env HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15" 194.147.58.39 - - [02/Aug/2026:00:29:36 +1000] "GET /.codex/.credentials.json HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Fedora; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 194.147.58.39 - - [02/Aug/2026:00:29:36 +1000] "GET /.codex/auth.json HTTP/1.1" 404 993 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" 194.147.58.39 - - [02/Aug/2026:00:29:36 +1000] "GET /.codex/.env HTTP/1.1" 404 993 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.8" 194.147.58.39 - - [02/Aug/2026:00:29:36 +1000] "GET /.codex/.credentials.json HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 194.147.58.39 - - [02/Aug/2026:0 ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-26 02:18:45 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 194.147.58.39 (vmi3328672.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 194.147.58.39 (vmi3328672.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 22:18:38.844594 2026] [security2:error] [pid 4106004:tid 4106071] [client 194.147.58.39:54840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "certifiedebusinessconsultant.aafm.us"] [uri "/.env"] [unique_id "amVufqhW_iUamTdapneMmgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 aranguren.org	2026-07-25 14:03:37 (4 weeks ago)	194.147.58.39 - - [25/Jul/2026:23:59:39 +1000] "GET /.codex/auth.json HTTP/1.1" 404 997 "-" "Mozilla ... show more 194.147.58.39 - - [25/Jul/2026:23:59:39 +1000] "GET /.codex/auth.json HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Windows NT 6.2; rv:139.0) Gecko/20100101 Firefox/139.0" 194.147.58.39 - - [25/Jul/2026:23:59:39 +1000] "GET /.codex/config.toml HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 12_3_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.3 Safari/605.1.15" 194.147.58.39 - - [26/Jul/2026:00:03:36 +1000] "GET /.grok/credentials.json HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15" 194.147.58.39 - - [26/Jul/2026:00:03:36 +1000] "GET /.grok/auth.json HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.2" 194.147.58.39 - - [26/Jul/2026:00:03:36 +1000] "GET /.grok/config.toml HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" 194.147.58.39 - - [2 ... show less	Bad Web Bot
🇦🇺 aranguren.org	2026-07-18 13:54:18 (1 month ago)	194.147.58.39 - - [18/Jul/2026:23:44:25 +1000] "GET /.claude/.credentials.json HTTP/1.1" 404 993 "-" ... show more 194.147.58.39 - - [18/Jul/2026:23:44:25 +1000] "GET /.claude/.credentials.json HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.9 Mobile/15E148 Safari/604.1" 194.147.58.39 - - [18/Jul/2026:23:44:25 +1000] "GET /.claude/.credentials.json HTTP/1.1" 404 997 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36" 194.147.58.39 - - [18/Jul/2026:23:49:29 +1000] "GET /.claude/settings.json HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.13 Mobile/15E148 Safari/604.1" 194.147.58.39 - - [18/Jul/2026:23:49:29 +1000] "GET /.claude/settings.json HTTP/1.1" 404 997 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.11 Safari/605.1.15" 194.147.58.39 - - [18/Jul/2026:23:54:17 +1000] "GET /.aws/config HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Windows NT 10.0 ... show less	Bad Web Bot
🇧🇪 cmbplf	2026-07-12 17:39:54 (1 month ago)	103 requests with url.path *credentials.json	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-11 13:45:13 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.147.58.39 (vmi3328672.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 194.147.58.39 (vmi3328672.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 09:45:08.371307 2026] [security2:error] [pid 28169:tid 28169] [client 194.147.58.39:40784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wfowisdom.systemcapacityoptimization.com"] [uri "/.codex/.env"] [unique_id "alJI5D2uFG804po9op-OxwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 aranguren.org	2026-07-11 13:35:17 (1 month ago)	194.147.58.39 - - [11/Jul/2026:23:33:09 +1000] "GET /.grok/config.toml HTTP/1.1" 404 993 "-" "Mozill ... show more 194.147.58.39 - - [11/Jul/2026:23:33:09 +1000] "GET /.grok/config.toml HTTP/1.1" 404 993 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:78.0) Gecko/20100101 Firefox/78.0" 194.147.58.39 - - [11/Jul/2026:23:35:17 +1000] "GET /.env.local HTTP/1.1" 404 993 "-" "python-requests/2.34.2" 194.147.58.39 - - [11/Jul/2026:23:35:17 +1000] "GET /.env.staging HTTP/1.1" 404 993 "-" "python-requests/2.34.2" 194.147.58.39 - - [11/Jul/2026:23:35:17 +1000] "GET /.env.development HTTP/1.1" 404 993 "-" "python-requests/2.34.2" 194.147.58.39 - - [11/Jul/2026:23:35:17 +1000] "GET /.env HTTP/1.1" 404 993 "-" "python-requests/2.34.2" 194.147.58.39 - - [11/Jul/2026:23:35:17 +1000] "GET /.env.prod HTTP/1.1" 404 993 "-" "python-requests/2.34.2" ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-11 12:45:57 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 194.147.58.39 (vmi3328672.contaboserver.net): 1 ... show more (mod_security) mod_security (id:210492) triggered by 194.147.58.39 (vmi3328672.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 08:45:51.468785 2026] [security2:error] [pid 31168:tid 31204] [client 194.147.58.39:45092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "certifiedebusinessconsultant.com"] [uri "/.env.local"] [unique_id "alI6_z9IoE3s1lWHE6TVlwAAANc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 heyzg	2026-07-03 13:59:17 (1 month ago)	API LLMjacking (Ollama) (observed): 1 HTTP; Ollama: /api/pull	Hacking Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 119.249.100.107

🇨🇳 112.252.152.209

🇰🇷 112.164.209.108

🇨🇳 106.75.174.249

🇸🇪 88.129.165.39

🇧🇷 45.226.133.211

🇺🇸 45.66.150.12

🇨🇴 181.49.8.57

🇺🇸 162.216.150.173

🇮🇩 139.255.2.146

🇺🇸 91.230.168.191

🇸🇬 47.128.111.237

🇭🇰 43.161.233.190

🇻🇳 42.116.149.153

🇺🇸 24.119.36.250

🇬🇧 216.226.76.30

🇿🇦 197.85.190.30

🇫🇷 172.68.151.134

🇩🇪 167.94.146.32

🇬🇦 154.116.93.85